CVE-2021-25407: High severity android vulnerability
Published Jun 11, 2021
·Updated
A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.
Affected Software
7 affected components
Google Android=9.0
Google Android=10.0
Google Android=11.0
Samsung Exynos 2100
Samsung Exynos 980
Samsung Exynos 9820
Samsung Exynos 9830
Event History
Jun 11, 2021
CVE Published
via MITRE·02:33 PM
Data Sourced
via MITRE·02:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-25407?
The severity of CVE-2021-25407 is high with a CVSS score of 7.8.
2
Which software versions are affected by CVE-2021-25407?
CVE-2021-25407 affects Google Android versions 9.0, 10.0, and 11.0.
3
Is Samsung Exynos 2100 vulnerable to CVE-2021-25407?
No, Samsung Exynos 2100 is not vulnerable to CVE-2021-25407.
4
How can I fix CVE-2021-25407?
To fix CVE-2021-25407, update your Android device to SMR JUN-2021 Release 1 or later.
5
Where can I find more information about CVE-2021-25407?
You can find more information about CVE-2021-25407 at the following references: [Packet Storm Security](http://packetstormsecurity.com/files/163198/Samsung-NPU-npu_session_format-Out-Of-Bounds-Write.html) and [Samsung Mobile Security Updates](https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6).